ELLIPTIC CARMICHAEL NUMBERS AND ELLIPTIC 
KORSELT CRITERIA 



JOSEPH H. SILVERMAN 

Abstract. Let E/Q be an elliptic curve, let L{E,s) — J^'^nn'^ be 
the L-series of E/<Q, and let P e E{Q) be a point. An integer n > 2 
having at least two distinct prime factors will be be called an elliptic 
pseudoprime for {E, P) if E has good reduction at all primes dividing n 
and + 1 — a„)P = (mod n). Then n is an elliptic Carmichael number 
for E if n is an elliptic pseudoprime for every P S i?(Z/nZ). In this note 
we describe two elliptic analogues of Korselt's criterion for Carmichael 
numbers, and we analyze elliptic Carmichael numbers of the form pq. 



1. Introduction 

Classically, a composite integer n > 2 is called a pseudoprime to the 
base b if 

= 1 (mod n). 

A Carmichael number is an integer n that is a pseudoprime to all bases that 
are relatively prime to n. Explicit examples of Carmichael numbers were 
given by Carmichael [3] in 1912, although the concept had been studied 
earlier by Korselt [12] in 1899. In particular, Korselt gave the following 
elementary criterion for Carmichael numbers, which was rediscovered by 
Carmichael. 

Proposition 1 (Korselt's Criterion). A positive composite number n is a 
Carmichael number if and only if n is odd, square-free, and every prime p 
dividing n has the property that p — 1 divides n — 1. 

In 1994, Alford, Granville, and Pomerance [1] proved the long-standing 
conjecture that there are infinitely many Carmichael numbers. 

The definitions of pseudoprimes and Carmichael numbers are related to 
the orders of numbers in the multiplicative group (Z/nZ)*. It is thus natural 
to extend these constructions to the setting of other algebraic groups, for 
example to elliptic curves. Gordan [5] appears to have been the first to define 
elliptic pseudoprimes, at least in the setting of elliptic curves having complex 
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multiplication. See Remark IHfor a description of Gordan's definition, which 
includes a supersingularity condition, and for additional references. 

In this note we define elliptic pseudoprimes (Section [2]) and elliptic Car- 
michael numbers (Section [3]) on arbitrary elliptic curves E/Q. Our defini- 
tion (mostly) reduces to Gordan's definition in the CM setting. We give 
two Korselt-type criteria for elliptic Carmichael numbers. The first, in Sec- 
tion HI only goes one direction (Korselt implies Carmichael), but is relatively 
easy to check in practice. The second version, described in Section |5l is bi- 
directional, but less practical. In Section [6] we discuss elliptic Carmichael 
numbers pq that are the product of exactly two primes. (It is an easy exer- 
cise to show that there are no classical Carmichael numbers of the form pq.) 
Finally, we give some numerical examples of elliptic Carmichael numbers in 
Section [71 

Without going into details (which are given later), we note that our con- 
struction replaces the quantity n — 1 in the classical pseudoprime definition 
j^n-i ^ ^ (mod n) with the quantity n -|- 1 — a„ in the case of elliptic curves, 
where a„ is the usual coefficient of the L-series of £^/Q. An integer n is then 
an elliptic pseudoprime for the curve E and point P G £'(Z/nZ) if E has 
good reduction at all primes dividing n and 

(ra + l-a„)P = (modn), (1.1) 

where the congruence (11. ip takes place in £'(Z/nZ). Notice that if we take n 
to be a prime p, then f ll.ip is automatically true, because ^E{Z/pZ) = 
p + 1 — Gp. Thus the analogy between the multiplicative group and elliptic 
curves that we are using may be summarized by noting that 

#G„(Z/pZ) =p- 1 and #E(Z/pZ) = p + 1 - ap, (1.2) 

replacing p by n (and removing the equality signs), and asking if the re- 
sulting quantity n — 1, respectively n -|- 1 — a„, is still an annihilator of 
Gm(Z/nZ), respectively £'(Z/nZ). 

Remark 2. In this paper, when we write E{'L/nL), we will always assume 
that E has good reduction at all primes dividing n. It follows that a minimal 
Weierstrass equation for -E/Q defines a group scheme 

E — y Spec(Z/nZ), 

so it makes sense to talk about the group of sections, which is what we 
mean by the notation E{'L/nL). Further, if n factors as n = pl^ ■ ■ ■ Pt* 
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with pi, . . . ,pt distinct primes, then there is a natural isomorphism (essen- 
tially the Chinese remainder theorem) 

E{Z/nZ) = E{Z/pI'Z) X ■ ■ ■ X E{Z/pl*Z). 

2. Elliptic Pseudoprimes 

In this section we define elliptic pseudoprimes in general and relate our 
definition to Gordan's definition of elliptic pseudoprimes on CM elliptic 
curves. 

Definition. Let n G Z, let -E/Q be an elliptic curve given by a minimal 
Weierstrass equation, and let P G E{Tjjn£). Write the L-series of -E/Q as 
L{E s) = 'Y^ anjn^ ■ We say that n is an elliptic pseudoprime for [E, P) 
if n has at least two distinct prime factors and the following two conditions 
hold: 

• E has good reduction at every prime p dividing n. 

• {n + l-an)P = (modn). (2.1) 

Remark 3. We note that if E has good reduction at p, then every point 
in E{7j/p7j) is killed by p + 1 — a^, since p + 1 — ap = #i?(Z/pZ). 

Remark 4. The first definition of elliptic pseudoprimes appears to be due 
to Gordan [5J. Gordan's definition, which only applies to elliptic curves 
with complex multiplication, is as follows. Let E/Q be an elliptic cruve 
with complex multiplication by an order in Q(a/— -D ), and let P G E(Q) 
be a non-torsion point. Then a composite number n is a Gordan elliptic 
pseudoprime for the pair {E, P) if 

(^—-^ = ~1 and (n + 1)P = (mod n). 

Gordan's motivation for this definition was to study elliptic pseudoprimes 
as tools for primality and factorization algorithms. Under GRH, he proves 
that the set of elliptic pseudoprimes has density 0, and gives an example of 
a pair {E, P) having infinitely many elliptic pseudoprimes. 

For simplicity, we consider Gordan's definition for a curve E that has 
CM by the full ring of integers of Q{^/^^). Then for primes p > 5 of 
good reduction, we have ap{E) = if and only if p is inert in Q{^/—D ), 
which is equivalent to {—D\p) = — L Thus the condition {—D\n) = — 1 
implies that at least one prime p dividing n satsifies ap{E) = 0. If we also 
assume that \ n, then a„ = 0, since a„ is a multiplicative function. (More 
generally, if ap = 0, then ap2k+i = and ap2k = {—pY for all k > 0.) 
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To recapitulate, we have 

r-D\ 

= — 1 and n square- free =^ a„ = 0. 

\ n J 

Thus for (most) square-free values of n, Gordan's condition {n + 1)P = 
(mod n) is the same as our condition (n + 1 — a„)P = (mod n), because 
his Jacobi symbol condition {—D\n) = —1 forces a„ = 0. 

For other articles that study Gordan elliptic pseudoprimes and related 
quantities, see[2llll[6l[7l|9l[ini[IIl[l3l[Tl]. 

3. Elliptic Carmichael Numbers 

Definition. Let n G Z and let E/Q be an elliptic curve. We say that n is an 
elliptic Carmichael number for E if n is an elliptic pseudoprime for {E, P) 
for every point P G EiTj/riL). 

Classically, a Carmichael number n is necessarily odd, since it satisfies 
(— = 1 (mod n). More intrinsically, this is true because the multi- 
plicative group Gm(Q) has an element of order 2. The elliptic analog of this 
fact is the following elementary proposition. 

Proposition 5. Let E/Q be an elliptic curve, and letT G -^(Q) be a torsion 
point of exact order m. If n is a Carmichael number for E, then 

n = an — ^ (mod m). 

Proof. Suppose that n is a Carmichael number for E. To ease notation, let 
N = n + 1 — an- By definition, n has at least two distinct prime factors, 
say p and q. Further, we know that NT = (mod n), and hence 

NT = (mod p) and NT = (mod q). 

Write m = p^m' with p \ m'. Then p^NT = (mod p), and also p^NT 
is killed by m'. The injectivity of prime-to-p torsion under reduction mod- 
ulo p [ini VII. 3.1] allows us to conclude that p^NT = 0. 

Similarly, writing m = q^m" with q \ m", we find that q^NT = 0. Since p 
and q are distinct, it follows that NT = 0. But by assumption, T has exact 
order m, hence m\N. □ 

Remark 6. An appropriate formulation of Proposition [5] is true more gen- 
erally for abelian varieties. Thus let A/Q be an abelian variety, let n be an 
integer with at least two distinct prime factors p and q such that A has good 
reduction at p and q, and let N be an integer that annihilates y4(Z/nZ). 
(Here we can take A to be the Neron model over Z, so A is a group scheme 
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over Spec Z and it makes sense to talk about the group of sections AiXlnL).) 
Suppose further that A(Q) has a point of exact order m. Then m \ N . 

Definition. Let n ^1. We will say that is a universal elliptic Carmichael 
number if n is an elliptic Carmichael number for every elliptic curve (elliptic 
scheme) over TLjnTL. 

Remark 7. A natural question is whether there are any universal elliptic 
Carmichael numbers. Our guess is that probably none exist, or in any case, 
that there are at most finitely many. This raises the interesting question of 
finding nontrivial upper and lower bounds, in terms of n, for the size of the 
set 

\E mod n : n is a Carmichael number for i?}. (3-1) 

For example, suppose that n = is a product of distinct primes. A very 
rough heuristic estimate suggests that the probability that a given E mod pq 
has as a Carmichael number is (^((pg)^^), so at least for such n one might 
conjecture that the size of the set (13. ip is bounded independently of "pq. 



4. Elliptic Korselt Numbers of Type I 

The classical Korselt criterion (Proposition [T]) gives an efficient method 
for determining if a given integer n is a Carmichael number, assuming of 
course that one is able to factor n into a product primes. In this section we 
give a practical one-way Korselt criterion for elliptic Carmichael numbers. 
Any number satisfying this elliptic Korselt criterion is an elliptic Carmichael 
number, but the converse need not be true. 

Definition. Let n G Z, and let i?/Q be an elliptic curve. We say that n 
is an elliptic Korselt number for E of Type / if n has at least two distinct 
prime factors, and if for every prime p dividing n, the following conditions 
hold: 

• E has good reduction at p. 

• p + 1 — ap divides n + 1 — a^. (4.1) 

, / N I 1 if a„ ^ 1 (mod n), , , 

. ord,a„-l >ord,n /' 4.2 

10 if Op = 1 (mod p). 

Remark 8. If n is square-free and ap ^ 1 (mod p) for all p \ n, then the 
condition (14. 2 p is vacuous, since it reduces to the statement that ordp(a„ — 
1) > 0. 
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Remark 9. Classical Carmichael numbers are automatically square-free. The 
elliptic analog of this fact is our Korselt condition (14. 2p . To see the rela- 
tionship, we extend the analogy used by Gordan to consider values of n 
such that E is supersingular at all primes p \ n. For ease of exposition, we'll 
make the slightly stronger assumption that = for all p \ n. (This is only 
stronger for p = 2 and p = ?>.) Then p | a„, since as noted earlier, a„ is a 
multiplicative function, and = implies that ap2k+i = and ap2k = {—pY 
for all > 0. Hence in this situation we have 

ordp(an — 1) = and = ^ 1 (mod p), 

so (14. 2p reduces to the statement that ordp(n) < 1. This is true for all p \ n, 
so n is square-free. Of course, this is under the assumption that = for 
all p \ n. As we will see later in Example [181 elliptic Carmichael numbers 
need not in general be square-free. 

Remark 10. If p > 7, then 

ttp = 1 (mod p) <^==^ E is anomalous at p, 

where we recall that E is anomalous if = 1, or equivalently, if we have 
jj^E{'L/p'L) = p. In particular, condition (14.21) in the definition of Type I 
Korselt numbers is vacuous if the following three conditions are true for all 
prime divisors p of n: 

p > 7, E is not anomalous at p, p^ \ n. 

We also observe that the Hasse-Weil estimate |ap| < 2^ implies that 

ordp(p + 1 — ctp) < 1 unless p = 2 and ap = —1. 

The exceptional case, namely ord2(3 — 02) = 2 when 02 = —1, is the reason 
that the next proposition deals only with odd values of n. 

Proposition 11 (Elliptic Korselt Criterion I). Let n ^ Z be an odd integer, 
and let E/Q be an elliptic curve. If n is an elliptic Korselt number for E of 
Type I, then n is an elliptic Carmichael number for E. 

Proof. Let p be a prime of good reduction for E. Then the group EiTj/pl,) 
has order p + 1 — Op, so the standard filtration on the formal group of E{Qp) 
(see [16]) imphes that 

p'-\p+l-ap)P = (mod p') for alH > 1 and all P G E{Qp). (4.3) 

Now let P G EiTj/riL), and write n = p^n' with i>l and p \ n' . Suppose 
first that ^ 1 (mod p). Then p + 1 — is relatively prime to p, so (14. ip 
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and (14.21) together imply that 

+1 - ap) divides n + 1 - a„. (4.4) 

Next suppose that = 1 (modp). As noted earlier, the Hasse-Weil 
estimate |ap| < 2y/p then implies that 

ordp(p+ 1 - Op) = 1. (4.5) 

(This is where we use the assumption that n is odd, so p ^ 2.) We compute 

ordp(?2 + 1 - a„) 

= ordp(p*n' + 1 — a„) since n = p'^n' , 

> minji, ordp(a„ — 1)} triangle inequality, 

> minji, ordp(?T,)| from Korselt condition (14. 2p . 
= i since n = p^n', 

= ordp{p'~^{p + 1 - ap)) from fH3]) . (4.6) 

Combining f l4.4p and (14. 6p . we have proven that 

P^~^{p + 1 — cbp) \ n + 1 — ttn for all primes p \ n. 

It follows from f lO]) that 

(n + 1 — a„)P = (mod j9°'''^p(")) for all primes p \ n. 

Using the Chinese remainder theorem, we conclude 

{n + 1 — an)P = (mod n). 

Finally, since P G EiTj/nL) was arbitrary, this completes the proof that n 
is an elliptic Carmichael number for E. □ 

5. Elliptic Korselt Numbers of Type II 

The classical Korselt criterion gives both a necessary and sufficient con- 
dition for a number n to be a Carmichael number. Our Proposition [TT] gives 
one implication, namely Type I Korselt implies Carmichael. The reason we 
do not get the converse implication is because condition (14. ip in the def- 
inition of Type I Korselt numbers is not, in fact, the exact analog of the 
classical condition. Condition (14. ip comes from the analogy, already noted 
in the introduction (II. 2p . that 

#G„(Z/pZ) =p- 1 and #E(Z/pZ) = p + 1 - Op. 

However, the real reason that p—1 appears in the classical Korselt criterion 
is because p — 1 is the exponent of the group (Z/pZ)*, i.e., p — 1 is the 
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smallest positive integer that annihilates every element of (Z/pZ)*. This 
follows, of course, from the fact that (Z/pZ)* is cyclic. 

Elliptic curve groups ii^(Z/pZ), by way of contrast, need not be cyclic, 
although it is true that they are always a product of at most two cyclic 
groups. So a more precise elliptic analog of the classical Korselt criterion 
is obtained by using the exponent of the group i?(Z/pZ), rather than its 
order. This leads to the following definition and criterion, which while more 
satisfying in that it is both necessary and sufficient, is much less practical 
than Proposition [TTl 

Definition. For a group G, we write e{G) for the exponent of G, i.e., the 
least common multiple of the orders of the elements of G. Equivalently, e(G) 
is the smallest postive integer such that g'^^'^^ = 1 for all g G G. For an elliptic 
curve E/Q, integer n, and prime p, to ease notation we will write 



Definition. Let n G Z, and let E/Q be an elliptic curve. We say that n 
is an elliptic Korselt number for E of Type II if n has at least two distinct 
prime factors, and if for every prime p dividing n, the following conditions 
hold: 



Proposition 12 (Elliptic Korselt Criterion II). Let n > 2 be an odd integer, 
and let E/Q be an elliptic curve. Then n is an elliptic Carmichael number 
for E if and only if n is an elliptic Korselt number for E of Type II. 

Proof. The definitions of both elliptic Carmichael and elliptic Korselt num- 
bers include the requirement that E have good reduction at every prime 
dividing n, so we assume that this is true without further comment. 

Suppose first that n is an elliptic Carmichael number. By definition, this 
means that 



In other words, the quantity n + 1 — a„ annihilates the group £'(Z/nZ). 
Hence for any prime power dividing n, the quantity n + 1 — a„ will 
also annihilate the group £'(Z/p*Z). It follows that n + 1 — a„ is divisible 
by ep^n{E), which is the exponent of the group i?(Z/p*Z). This is true for 
every prime dividing n, and hence n is a Type II Korselt number for E. 




• E has good reduction at p. 

• en,p{E) divides n + 1 — a„. 



(5.1) 



(n + l-a„)P = (mod n) for all P G ^(Z/nZ). 



(5.2) 
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Conversely, suppose that n is Type II Korselt. Factoring n as n = 
pT ' ' 'PT 1 we have from the Chinese remainder theorem 

E{Z/nZ) = E{Z/pI'Z) X ■ ■ ■ X E{Z/p1*Z), 

from which we see that 

e{E{Z/nZ)) = LCM[e„,p,(E), . . . , e„,p,(E)] . (5.3) 

Property (15.11) of Type II Korselt numbers says that 

en^p{E) \ n + 1 — an for all p \ n, (5.4) 

and combining (15.31) and (15. 4p yields 

e{E{Z/nZ)) | + 1 - a„. 

It follows that n + 1 — a„ annihilates E{Z/nZ), which means that n is an 
elliptic Carmichael number. □ 

Corollary 13. If n is an odd elliptic Korselt number for E/Q of Type I, 
then it is also an elliptic Korselt number for E/Q of Type II. 

Proof. Propositions [TT] and [T^ give the implications 

Korselt Type I ^ Carmichael ^ Korselt Type II. 

□ 

In order to understand the definition of elliptic Korselt numbers of 
Type II, we gather some information about the exponents en,p{E). We begin 
with a slightly technical definition. 

Definition. Let p > 3 be a prime, and let E/Q be an elliptic curve with 
good anomalous reduction at p, i.e., ap{E) = 1 (mod p). (If p > 7, this is 
equivalent to ap{E) = 1.) For each power with i > 2, we say that E is 
p^- canonical if 

E{Z/p'Z)[p] = Z/pZ X Z/pZ, 
and E is p^ -noncanonical if 

E{Z/p'Z)[p] = Z/pZ. 

Remark 14. For primes p > 3, the formal group of E/Qp satisfies E{pZp) = 
pZip (see [m Theorem IV.6.4]), so there is an exact sequence 

— > pZ+ — > E{Zp) — > E{Z/pZ) — > 0. 

Reducing modulo p* gives 

— > pZ/p'Z — > E{Z/p'Z) — > E{Z/pZ) — > 0. (5.5) 
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Assume now that i >2 and = 1 (mod p), so in particular 

#E(Z/j9Z) =j9 + l-ap = (modp). 

Note that the Hasse-Weil estimate says that p'^ \ i^E{Z/pZ), so taking the 
p-torsion of (15.51) gives 

— > Z/pZ — > E{Z/p%[p] — > Z/pZ — > 0. (5.6) 

This shows that E{Z/p'Z)[p] ^ (Z/pZ)'' with A; = 1 or 2, and hence that E 
is either p*-canonical or p*-noncanonical, i.e., there is no third option. 

Remark 15. For an ordinary eUiptic curve C /¥p, the canonical lift, also 
sometimes called the Deuring lift, is an elliptic curve C/Qp whose reduction 
is C and having the property that End(C) = End(C). Equivalently, the 
Frobenius map on C lifts to an endomorphism of C. Necessarily, the curve C 
has CM. We denote the canonical lift by Lift(C'/Fp). Now let E/Q be an 
elliptic curve. A result of Gross [8^, page 514] implies that the sequence (15. 6p 
splits if and only 

jiE)^j{UitiE/¥p)) (modp2), 

i.e., if and only if E modp^ is isomorphic, modulo p'^, to the canonical lift 
of E mod p. Thus at least for i = 2, the curve E is p^-canonical according to 
our definition if E mod p"^ is a canonical lift in the usual sense. For further 
information about canonical lifts, see for example [Bl [T3] . 

Lemma 16. Let p > 3 be a prime, and factor 

en,p{E) = p^A with gcd{A,p) = 1. 

(a) If ttp^l (modp), then 

A\p +1 — ap and f = ordp(n) — 1. 

(b) If Qp = 1 (mod p), then A = 1 or 2, and 

ordp(n) — 1 if E is p°^^p^'^^ -canonical, 
ordp(n) if E is p°^^p^^^ -noncanonical. 



f 



Proof. To ease notation, let i = ordp(n). We use the exact sequence 

— > ^ E{Z/p'Z) E{Z/pZ) (5.7) 

P ILt 

as described in Remark [HI 

Suppose first that ctp ^ 1 (mod p\ It follows that 

j^EiZjpZ) = p + l-ap^O (mod p) , 
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SO the exponent of i?(Z/]9*Z) has the form p^~^A for some A dividing p + 
1 — ap. This completes the proof of (a). 

We now suppose that = 1 (mod p), so ^E{Z/pZ) = Ap. The Hasse- 
Weil estimate gives 



i{EiZ/p%) 



p p \ Vp^ 

Since p > 3, we see that A < 2, so p \ A; and if p > 7, then A must equal 1. 
In any case, we have A \ p + 1 — ap. 

It follows from the exact sequence (15. 7p that the exponent of £'(Z/p*Z) 
is given by 

Ap'' if the sequence (15. 7p does not split, 
jf ^]-^g sequence (15. 7p does split. 

Further, since (15. 7p is (essentially) the extension of a cyclic group of or- 
der p^~^ by a cyclic group of order p, we see that it splits if and only 
if E{'L/p''L) has a p-torsion point that does not map to in i?(Z/j9Z). In 
other words, 

the sequence ([ET]) splits E{Z/p'Z)[p] = Z/pZ x Z/pZ 

<^==^ E is p*-canonical. 

This observation completes the proof of (b). □ 

6. Elliptic Korselt Numbers of the Form pq 

It is an easy consequence of the Korselt criterion that a classical Car- 
michael number must be a product of at least three (distinct odd) primes. 
This is not true for elliptic Korselt numbers, as seen in the examples in 
Section [71 However, elliptic Korselt numbers of the form n = pq do satisfy 
some restrictions, as in the following result. 

Proposition 17. Let E/Q be an elliptic curve, and let n = pq be a Type I 
elliptic Korselt number for E that is a product of two distinct primes, say 
with p < q. Then one of the following is true: 

(i) P < 17. 

(ii) ap = aq = 1, i.e., both p and q are anomalous primes for E. 

(iii) p>^. 

Proof. We assume that p > 17 and that at least one of Op and aq is not 
equal to 1, and we will prove that p satisfies the estimate in (iii). We have 

n + 1 — a„=pg + l — ttpttq = p{q + 1 — a^) + paq — p — apttq + 1. 
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Thus the Korselt condition g+1 — aq|n+l — a„ imphes that 

q + 1 — Qq \ paq — p — apGg + 1. (6.1) 

We consider two cases. 

First, suppose that paq — p — apaq + 1 = 0. A httle bit of algebra yields 

{p - ap){aq - 1) = ttp - 1. 

We have p ^ ap, since p > 5 by assumption, so = 1 if and only if = 1. 
We're also assuming that they are not both equal to 1, so neither is equal 
to 1 and we can solve for p, 

Op - 1 
p = ap + -. 

ttq- 1 

But then 



p < \ap\ + 



< \ap\ + \ap - 1| < 2\ap\ + 1 < 4^+ 1. 



This contradicts p > 17, so we conclude that paq ~ p — apaq + 1 7^ 0. 
It then follows from the Korselt divisibility condition (16. ip that 

\q + 1 - aq\ < \paq - p - apaq + 1|. 

Using the Hasse-Weil estimate for Op and Og, this gives 

q + l- 2y/q < py/q + y/pq +{p-l). 

Treating this as a quadratic inequality for ^/p, we find that 



vrn ■ 

Asymptotically this gives ^/p > 2^, and a little bit of calculus shows that 
the right-hand side of (16. 2 p is larger than ^ for all g > 13. Squaring, we 
find that 

P > a/^ for all q > 13. 

Since we are assuming that q > p > 17, this proves property (iii), which 
completes the proof of Proposition [T71 □ 



7. Numerical Examples 



In this section we present several numerical examples of elliptic Carmi- 
chael and elliptic Korselt numbers. These examples were computed using 

PARI-GP [n]. 
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n 


n + 1 — a„ 


P 


J9 + 1 - ttp 


15 


= 3 ■ 


5 


16 = 2^ 


3 
5 


4 = 2^ 
4 = 22 


77 = 


= 7- 


11 


90 = 2 • 3^ ■ 5 


7 
11 


6 = 2-3 
18 = 2 ■ 32 


203 


= 7- 


29 


216 = 2^-3^ 


7 

29 


6 = 2-3 
36 = 22 . 32 


245 


= 5 


72 


252 = 2^ • 3^ ■ 7 


5 
7 


4 = 22 
6 = 2-3 


725 


= 52 


■ 29 


720 = 2^ • 32 ■ 5 


5 

29 


4 = 22 
36 = 22 - 32 


875 


= 5^ 


■ 7 


900 = 2^ • 32 • 52 


5 
7 


4 = 22 
6 = 2-3 



Table 1. Type I Elliptic Korselt numbers for E : y'^ = + 

X + 3 

Example 18. Let E be the elliptic curve 

E : y"^ = x"^ + X + 2,. 

Its discriminant is A^; = —2^-13-19. The curve E has six Korselt (and hence 
Carmichael) numbers smaller than 1000. They are described in Table [H In 
particular, note that the table contains elliptic Korselt (hence Carmichal) 
numbers 245 = 5-72 g-j^g = 53 . 7 \\iqx are not square-free; cf. Remark O 

Example 19. Let E be the elliptic curve 

E-.y"^ = x^ + 7x + ?,. (7.1) 

It has discriminant A^; = —25840 = —2^ - 5 - 17 - 19 and conductor = 
25840. It is curve 25840w in Cremona's tables, which also tell us that its 
rank is exactly 1. This curve E has no Type I Korselt numbers smaller 
than 25000. We do not know why this is true, since the curves y"^ = x^+ax+b 
with (a, b) G {(6, 3), (8, 3), (7, 2), (7, 4)} have lots of Type I Korselt numbers 
smaller than 10000. The first few Type I Korselt numbers for the curve (17. ip 
are 

{27563, 29711, 30233, 41683, 43511, 62413, 68783, 80519, 95207}. 
We also mention that this curve has -E'(Q)tors = 0. 
Example 20. Let E be the elliptic curve 

E : y'^ + xy + 3y = x^ + 2x'^ + 4x. 
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n 


n + 1 — ttn 


P 


J9 + 1 - Op 


65 = 5 • 13 


54 = 2 - 3^ 


5 

13 


9 = 3^ 
18 = 2 - 32 


143 = 11-13 


144 = 2* ■ 3^ 


11 
13 


12 = 2^ - 3 
18 = 2 - 32 


533 = 13-41 


486 = 2 - 3*^ 


13 
41 


18 = 2 - 3^ 
54 = 2 - 33 


1991 = 11 - 181 


1992 = 2^-3-83 


11 
181 


12 = 2^ - 3 
166 = 2 - 83 


4179 = 3-7-199 


4180 = 2^-5-11-19 


3 
7 
199 


4 = 2^ 
10 = 2-5 
190 = 2 - 5 - 19 


4921 = 7-19-37 


4950 = 2-3^-5^-11 


7 
19 
37 


10 = 2-5 
22 = 2 - 11 
45 = 32 - 5 



Table 2. Elliptic Korselt numbers for E : y"^ + xy + 3y = 
+ 2x'^ + Ax 



Then there are exactly six numbers n < 5000 that are Type I elliptic Korselt 
numbers for E, as described in Table [2l Extending the search, there are 20 
Type I elliptic Korselt numbers for E that are smaller than 100000, 

{65, 143, 533, 1991, 4179, 4921, 5251, 5611, 7429, 15839, 22939, 32339, 

35165, 35303, 41495, 48719, 56959, 69475, 83839, 98879}. 

Extending the search up to 200000 yields three more examples, 

{105083,161551,166493}. 

The non-square-free numbers in this list are 

69475 = 52 - 7 - 397, 83839 = 7^ - 29 - 59, 161551 = 13 - 17^ - 43. 

Acknowledgements. I would like to thank Felipe Voloch and Alvaro Lo- 
zano-Robledo for the observation in Remark [151 The research described in 
in this note was partly supported by the NSF (grant no. DMS-0854755). 
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